Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa
File:                     323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa (raw, json)
Hash identifier:          vKdfLADEiFQIV7FioDFNTlN7yWp2mrwFO9BHa2iLPQk=
Subject key identifier:   61:58:C0:FE:9D:4D:A5:D4:A1:F1:03:E1:39:31:0E:F8:67:7D:57:8B
Certificate issuer:       /CN=065E3409E65889AAF6B851D59C66CD22E4619409
Certificate serial:       308E5E6701F407616BD0B58AD0D195EE60027AF0
Authority key identifier: 06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa
Signing time:             Wed 11 Mar 2026 13:53:56 +0000
ROA not before:           Wed 11 Mar 2026 13:48:56 +0000
ROA not after:            Wed 10 Mar 2027 13:53:56 +0000
asID:                     265461
IP address blocks:        2804:347c:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8e:5e:67:01:f4:07:61:6b:d0:b5:8a:d0:d1:95:ee:60:02:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065E3409E65889AAF6B851D59C66CD22E4619409
        Validity
            Not Before: Mar 11 13:48:56 2026 GMT
            Not After : Mar 10 13:53:56 2027 GMT
        Subject: CN=6158C0FE9D4DA5D4A1F103E139310EF8677D578B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:7a:4a:5a:ef:41:82:4a:bc:c4:8b:a7:a3:
                    f1:e4:da:9a:3c:eb:b6:6b:30:b1:c7:ba:10:9d:f9:
                    5d:7e:90:e5:97:09:c3:ec:b5:7b:c5:c8:ee:bc:1c:
                    33:95:35:2a:83:40:fe:97:85:08:5e:08:d1:5e:68:
                    da:04:c1:3c:1f:d9:1e:f2:3a:81:49:27:36:d5:00:
                    b1:fb:a9:b0:3e:0b:80:61:e0:15:3c:94:ea:83:4e:
                    2c:74:f6:2d:b1:aa:07:78:e2:c9:be:e3:91:a2:1b:
                    39:e8:b2:b1:cc:9f:70:25:03:0f:47:35:94:95:bb:
                    44:26:2c:8a:4f:04:8d:8e:c9:f2:49:e8:14:20:48:
                    79:ea:cc:02:bd:bf:d6:3e:71:e1:70:a1:b9:84:fb:
                    75:b9:32:3c:97:f5:94:46:3c:1f:a0:39:84:f1:9e:
                    77:1c:9f:5b:ab:f2:57:aa:23:46:4c:52:05:6f:94:
                    3f:c3:b2:4e:0d:3e:cf:d1:88:df:9e:9d:24:4e:15:
                    d8:10:a8:3b:53:00:98:74:d6:bb:11:98:b7:30:64:
                    10:2c:6d:cf:f8:1a:be:93:3c:28:6b:30:1b:a8:d3:
                    64:97:70:64:e6:e4:13:b3:a9:33:ea:f7:f4:e3:ea:
                    e4:2b:dc:8e:d3:4a:c3:cb:80:ad:75:ae:a1:57:02:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:58:C0:FE:9D:4D:A5:D4:A1:F1:03:E1:39:31:0E:F8:67:7D:57:8B
            X509v3 Authority Key Identifier:
                keyid:06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/323830343a333437633a613030303a3a2f33362d3336203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c3:95:8b:8e:ac:40:ee:7f:1d:7b:d4:c9:76:38:4d:ba:37:98:
         cd:58:90:dd:76:da:0a:e8:0f:26:fa:09:9b:11:20:df:4e:26:
         9d:72:94:ba:fe:b9:e1:29:80:35:c7:a4:a0:38:71:11:c9:13:
         bc:c4:58:a0:44:9e:ff:14:0a:42:48:ac:3f:58:a7:c6:b3:81:
         14:0f:4b:1b:e9:39:af:ff:7b:0e:31:9d:ed:44:2d:1d:94:5d:
         44:97:59:21:d7:37:5e:15:10:a2:30:5e:ad:ee:ef:94:fe:b8:
         d8:ee:fe:6a:f0:bf:0d:88:76:90:26:d1:9c:86:9a:eb:4c:e8:
         83:bc:f6:ba:9c:35:c2:82:6c:51:2a:50:ed:43:60:4b:1f:e0:
         1a:8a:ed:05:51:03:c1:d5:ae:af:d2:51:e3:e9:7f:df:ba:75:
         73:39:d5:08:fb:a6:7a:f7:b8:62:46:90:7e:86:3f:9c:af:58:
         e5:31:24:d3:a2:2f:fb:9b:f2:6d:65:c0:07:c4:54:52:3a:f1:
         c5:5d:ca:89:cb:c3:f4:3e:18:8c:db:a9:ef:17:3c:f2:66:5d:
         73:1e:4b:81:9c:ac:98:31:92:f7:cd:df:5d:ac:a9:ed:06:6b:
         4f:5f:70:67:8e:30:34:0c:fa:3f:79:02:aa:ea:31:2c:4a:d7:
         6e:24:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:14:53 2026 by rpki-client